Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa
File:                     34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa (raw, json)
Hash identifier:          qBmpnwzcNpJkzM2ALV93jq8Irok70JZOX/8qUTRD2g8=
Subject key identifier:   0B:81:8D:94:7D:DE:FC:89:42:E6:83:1D:94:F3:D0:12:27:3F:31:8E
Certificate issuer:       /CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Certificate serial:       4CE05327CB525E62899C66C5B3ACBDE058FEFA63
Authority key identifier: 14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa
Signing time:             Mon 12 Feb 2024 12:26:45 +0000
ROA not before:           Mon 12 Feb 2024 12:21:45 +0000
ROA not after:            Mon 10 Feb 2025 12:26:45 +0000
asID:                     269041
IP address blocks:        45.178.169.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:53:27:cb:52:5e:62:89:9c:66:c5:b3:ac:bd:e0:58:fe:fa:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
        Validity
            Not Before: Feb 12 12:21:45 2024 GMT
            Not After : Feb 10 12:26:45 2025 GMT
        Subject: CN=0B818D947DDEFC8942E6831D94F3D012273F318E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:44:e4:e4:a9:a6:a5:5a:4a:48:42:9c:ab:
                    ff:73:25:db:64:6b:4a:3c:d5:aa:94:f9:e7:79:3c:
                    72:90:e6:cb:f3:e7:11:f2:5d:55:66:4e:ed:38:8b:
                    0b:44:1d:b0:74:81:7b:d2:4d:3a:97:7c:60:fc:81:
                    c6:43:0a:8a:19:eb:31:85:bb:28:da:15:5b:c9:d8:
                    8a:72:f8:4a:66:46:50:17:05:f5:b0:24:69:58:f0:
                    02:60:b6:81:d0:fb:95:15:d5:e2:23:eb:f9:65:90:
                    c8:05:4d:d1:ae:45:ae:a4:f9:e3:cf:71:2d:fb:7e:
                    7a:a1:5c:41:34:df:f9:bd:55:53:1f:c2:ae:00:ec:
                    2f:44:f3:8b:43:47:2b:7f:19:f8:f9:43:52:fd:3d:
                    4d:29:97:b7:95:4f:61:1b:6f:0d:6c:43:b7:62:dd:
                    7e:3f:0a:aa:89:5e:28:86:62:80:68:e6:96:3c:13:
                    0d:99:5e:f5:bf:e9:a7:35:1c:85:b8:69:23:ef:2f:
                    89:6e:06:5b:c2:4f:b0:9c:26:78:07:55:be:b3:07:
                    1a:26:c0:5a:fb:76:ec:64:55:5d:e5:d2:9f:2b:12:
                    11:db:80:99:e1:ab:a1:fb:35:44:7f:50:7f:27:e2:
                    f1:e4:58:5f:54:e3:84:56:ca:c5:5d:80:8f:f7:f6:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:8D:94:7D:DE:FC:89:42:E6:83:1D:94:F3:D0:12:27:3F:31:8E
            X509v3 Authority Key Identifier:
                keyid:14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136392e302f32342d3234203d3e20323639303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:b7:be:51:4e:7e:ad:f5:c2:2e:78:c2:f6:27:67:0b:f6:
         c1:da:54:09:c3:c0:68:78:1f:35:96:32:7f:f1:02:d8:c5:b9:
         2d:16:28:72:44:d2:b0:ac:47:14:85:a6:04:1c:e8:41:81:1b:
         81:b8:88:62:20:57:21:e8:d3:74:34:b0:5f:3a:e4:39:60:59:
         ea:b1:9b:c3:a7:24:6f:72:63:fe:62:0d:3e:30:29:75:d9:60:
         6a:ec:9f:0a:03:e8:a4:7c:4f:64:3e:89:15:25:4d:e2:c1:c6:
         d3:b8:16:89:fe:e6:f6:cd:67:1d:a9:d0:b7:52:54:f2:01:ae:
         46:31:b4:c6:dc:41:91:ce:ba:43:c4:cb:9d:9b:98:6c:ef:86:
         de:a0:1d:53:b9:74:2b:3f:1e:00:e8:f4:d8:f2:2b:a9:27:02:
         9b:b1:fb:7f:12:6a:b0:72:cb:b3:02:71:77:6f:17:35:c2:15:
         fc:51:47:d2:a6:6e:3e:81:49:9a:0c:dd:71:be:73:d5:74:54:
         51:57:f8:06:52:50:69:52:2b:81:03:b7:4d:4d:5c:39:3e:0e:
         95:ed:dd:22:ce:ee:12:60:50:4e:8d:62:7a:93:7a:27:7a:15:
         c0:f1:3c:26:22:01:84:78:99:b4:b3:8e:8d:ee:1f:6a:db:1d:
         5c:a3:01:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 03:49:43 2024 by rpki-client on console-fra.rpki-client.org